Statement from city of Fort Worth on IT lawsuit 


While the City does not typically comment on pending litigation, we want to assure the public 
and our employees that the City takes data security very seriously. Like all large organizations, 
constant vigilance and new tactics are necessary to prevent and respond to data breaches. The 
lawsuit involves an employee who was responsible for data security and was terminated for 
failure to follow management direction and do the things reasonably necessary to get us in 
compliance. The City is in compliance with all Federal regulations and is in line with industry 
practice for these protection measures. 

• The City was the victim of fraud in late 2017 when, due to human error, a vendor 
payment was redirected to a bad actor. Since that time, an arrest has been made in the 
case and additional safeguards have been implemented to ensure banking information 
updates are properly reviewed. 

• In the fall of 2018, the City addressed an employee data concern with a third-party 
benefit partner which was immediately resolved by the vendor with additional 
authentication requirements. 

• The Criminal Justice Information System (CJIS) audit was successfully concluded with 
the Department of Public Safety this spring in spite of the misinformation presented by 
the plaintiff to both the DPS and the Police Department. Per the Attorney General, these 
audits are not publicly available since bad actors could use the information to attempt to 
breach existing systems. 

The City is fully prepared to defend itself against these allegations. 



